Description

Splunk Enterprise Security is designed for information technology and data security professionals. It enables users to detect and respond to internal and external attacks, simplifying threat management and minimizing risk. It provides organization-wide visibility and security intelligence for continuous monitoring, incident response, SOC operations, and insights on possible business risks. Features include continuous monitoring with dashboards, key security indicators based on static & dynamic thresholds and trending, as well as automate incident response workflows with alerts, centralized logs, and pre-defined reports and correlations.